live · scanning repos
Scanrepo
github.com
github.com / nehalineogi

nehalineogi/azure-networking

Shell·116 files·commit 32b7f61·scanned 6h ago·cached ✓
30/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.
verdict accurate?
20% file coverage
threat-state: lowlive

FINDINGS ░▒▓

what this code does░▒▓

What happens when you open, install or run it, from the findings below.

  1. when runAKS/docker-networking/build-docker-hosts.sh and Azure-AI/build-cust-vnet.sh reference SSH key or cloud credential paths (such as ~/.ssh or ~/.aws/credentials). AKS/docker-networking/build-docker-hosts.sh, Azure-AI/build-cust-vnet.sh
warningHardcoded IP address in network callFetching data from hardcoded IP addresses instead of domain names is suspicious and may indicate C2 communication.AKS/CNI/build-azure-cni-powered-by-cilium.sh
k describe service -n demo-ns --watch
# curl http://20.119.104.171:8080/
k delete ns demo-ns
+5
warningHardcoded IP address in network callFetching data from hardcoded IP addresses instead of domain names is suspicious and may indicate C2 communication.AKS/CNI/build-kubenet-dual-stack.sh
k describe service -n demo-ns # Describe service
# curl http://20.119.104.171:8080/ # Test service
k delete ns demo-ns # Delete demo namespace
+5
warningHardcoded IP address in network callFetching data from hardcoded IP addresses instead of domain names is suspicious and may indicate C2 communication.AKS/Ingress/build-azure-cni-overlay-with-nginx.sh
#
curl http://51.8.66.245/red --header "Host: akscolors.penguintrails.com"
curl http://51.8.66.245/green --header "Host: akscolors.penguintrails.com"
curl http://51.8.66.245/blue --header "Host: ak...
+5
warningSSH/credential path accessAccessing .ssh, .aws/credentials, or .env files to steal authentication credentials.AKS/docker-networking/build-docker-hosts.sh
#
export PUB_KEY=~/.ssh/id_rsa.pub

# Get the current public IP of the user
+5
warningSSH/credential path accessAccessing .ssh, .aws/credentials, or .env files to steal authentication credentials.Azure-AI/build-cust-vnet.sh
#
export PUB_KEY=~/.ssh/id_rsa.pub

# Get the current public IP of the user
+5

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

23 files scanned @ 32b7f61 | 10/30/2026 | heuristic scan — always review manually

risk by category
code execution0
network & exfiltration20
file system access10
obfuscation0
supply chain0
owasp / injection0
telemetry
files 23/116rules hit 5engine v10commit 32b7f61

github

nehalineogi/azure-networking

Layered and Re-usable Azure Designs and Architectures

Shell
365
163
1421d
116 files
23 scanned(20%)
32b7f61

network indicators░▒▓

Hosts this code names or would connect to. 39 found, decoded and call-site destinations first. Informational, not scored.

architecture░▒▓

entry (0) flagged (0) pkg (6)
9 nodes · 7 edgesscroll to zoom · click node to jump to finding
LOW (30/100) — nehalineogi/azure-networking — ScanRepo